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FORT GEORGE G. MEADE, MARYLAND 20755 


February 20, 1985 


Mr. John N. McMahon 
Central Intelligence Agency 
Washington, D.C. 20505 

Dear Mr. McMahon: 

On September 17, 1984, the President signed the National 
Security Decision Directive 145, National Policy on 
Telecommunications and Automated Information System Security 
(NSDD 145) . The directive establishes the Director of the 
National Security Agency as the National Manager for 
Telecommunications and Automated Information Systems Security 
for the Federal Government. 

In support of the National Manager, the Computer Security 
Center has been tasked to sponsor and conduct forums for the 
purpose of security education and awarenesss related to the 
directive. As part of that education program, the Computer 
Security Center in conjunction with the Institute For Defense 
Analyses will host a one day symposium of information briefings 
on the NSDD 145 and on how the National Manager plans to 
implement it. The briefing will be held on March 15, 1985 at 
IDA’s Alexandria, Virginia facility. 

By way of background, this directive provides initial 
objectives, policies, and an organizational structure to guide 
the conduct of national activities directed toward safeguarding 
systems which process or communicate sensitive information from 
hostile exploitation; establishes a mechanism for policy 
development; and assigns responsibilities for implementation. 

The directive is intended to assure full participation and 
cooperation among the various existing centers of technical 
expertise throughout the Executive Branch, to promote a coherent 
and coordinated defense against the hostile intelligence threat 
to these systems, and to foster an appropriate partnership 
between government and the private sector in attaining these 
goals . 
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Topics to be covered during the briefing include: 

- Computer security responsibilities of individual 
agencies and departments under the directive 

- NSDD 145 framework and objectives 

- Role of the National Security Agency and the 
Computer Security Center as detailed by NSDD 145 

- Directive implementation strategy and schedule. 

In addition, this briefing is intended to generate feedback 
from organizations as to the proposed implementation plan as 
well as answer any questions that your organization may have 
concerning the directive. Following the symposium, participants 
will be invited to submit letters or white papers offering 
suggestions for improving the National Manager's plan to 
implement the NSDD 145. 

Because your department or agency will be affected by the 
new directive, it is important that you or a representative of 
your organization attend this symposium. Those departments or 
agencies desiring representation at the symposium are requested 
to forward names and credentials by 1 March 1985 to the NSDD 
Symposium for Government, DOD Computer Security Center, 9800 
Savage Road, Ft. Meade, MD, 20755-6000. Attendance may be 
limited to„iwo persons per department/agency. A white paper 
outlining computer security concepts and the NSDD 145 
implementation plan will be provided to responding 
organizations . 


Sincerely, 


Deputy Assistant Director 
for 

Computer Security 
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